Unscored severity · published May 14, 2015
CVE-2015-3326
Trend Micro ScanMail for Microsoft Exchange (SMEX) 10.2 before Hot Fix Build 3318 and 11.0 before Hot Fix Build 4180 creates session IDs for the web console using a random number…
–
CVSS
2.3%
EPSS
No
On KEV
Description
Trend Micro ScanMail for Microsoft Exchange (SMEX) 10.2 before Hot Fix Build 3318 and 11.0 before Hot Fix Build 4180 creates session IDs for the web console using a random number generator with predictable values, which makes it easier for remote attackers to bypass authentication via a brute force attack.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.3% · higher than 83% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SC
Scanmail · Trend Micro
10.2; 11.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-3326
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-3326
blog.malerisch.net
http://blog.malerisch.net/2016/05/trendmicro-smex-session-predictable-cve-2015-3326.html
Vendor Advisory
http://esupport.trendmicro.com/solution/en-US/1109669.aspx
www.securityfocus.com
http://www.securityfocus.com/bid/74661
www.securitytracker.com
http://www.securitytracker.com/id/1032323
More from Scanmail
–
CVE-2007-0851
Buffer overflow in the Trend Micro Scan Engine 8.000 and 8.300 before virus pattern file 4.245.00, as used in other products such as Cyber Clean Center (CCC) Cleaner, allows…
–
CVE-2005-0533
Heap-based buffer overflow in Trend Micro AntiVirus Library VSAPI before 7.510, as used in multiple Trend Micro products, allows remote attackers to execute arbitrary code via a…
–
CVE-2003-1343
Trend Micro ScanMail for Exchange (SMEX) before 3.81 and before 6.1 might install a back door account in smg_Smxcfg30.exe, which allows remote attackers to gain access to the web…